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(54) Title: DATA PACKET HANDLING 
(57) Abstract 

A data packet handling system is provided for 
receiving a sequence of data packets where the first packet 
(EMM-G) includes coding identifying one or more of the 
following packets (EMM-S) as required by the system. 
Following receipt of the first packet (201), all subsequent 
packets are buffered (202, 203) whilst the first is analysed 
(204-6) to determine which, if any, of the following 
packets are required. Having made the determination, the 
subsequent packets are read out of the buffer (207) and 
those not required are discarded. The system has particular 
application to the handling of entitlement messages for 
encrypted audio/video signal broadcasts. 
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1 

DESCRIPTION 

DATA PACKET HANDLING 

5 The present invention relates to systems for receiving and handling 

packetised data and particularly, but not exclusively, to conditional access 
reception systems for handling encrypted broadcast data. 

In conditional access systems, data reception (for example of television 
io pictures) is restricted to a specific subset of receivers, such as subscribers to 
a satellite movie channel. The data is transmitted in scrambled form and 
requires particular codes or 'keys' to enable it to be descrambled. These codes 
may be held by a subscriber or they may be transmitted in encrypted form 
along with the scrambled data and require the user to present a particular form 
15 of entitlement to allow decryption of the codes and hence descrambling of the 
data. An example of an encrypted broadcast system is described in European 
patent application EP-A-0 641 103, which describes the application of 
probabilistic determination to the generation of secure codes for subscriber and 
supplier. 

20 A problem with encrypted broadcast and other data handling systems 

occurs where the transmitted data is in the form of a header followed by a 
succession of data packets and the receiver is required to analyse the header 
to determine which of the following packets is actually required. This can be 
a particular problem with domestic satellite broadcast systems where the user 

25 will typically have a satellite receiver with integral descrambler coupled to a 
separate smartcard reader with decryptor: the descrambler passes the header 
to the decryptor for analysis and the decryptor responds with an identification 
code for the packets required. If the first packet following the header is one of 
those required, then there is a chance that it will be missed due to the 

30 decryptor not having responded in time. This in turn leads to insufficient of the 
packet data being presented to the decryptor to enable generation of all the 
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necessary code words required for descrambling with consequent loss of, for 
example, picture and/or sound for the user. Similar problems may be 
encountered in any system required to perform analysis of leading data to 
identify required ones from a following data packet sequence. 

5 

It is, therefore an object of the present invention to enable capture of all 
required packets identified in a preceding header. 

It is a further object to enable such capture in an encrypted broadcast 
system wherein the packet data includes subscriber grouping codes. 

10 

In accordance with the present invention there is provided a system for 
receiving a signal transmitted together with management messages, the system 
comprising means for receiving the transmitted signal, signal processing means 
for processing the received signal, and a sub-system for controlling the signal 

15 processing means and acting in response to the management messages, 
wherein the management messages include general messages and shared 
messages, a general message preceding and indicating that a plurality of 
shared messages are to be transmitted, and said sub-system requiring an 
appropriate shared message to enable processing of the signal and being 

20 arranged to monitor shared messages to detect a shared message which is 
addressed thereto, characterised in that the system includes means for 
recognising a general message, memory means are provided for storing a 
plurality of shared messages, means are provided for causing shared 
messages to be stored in said memory when a general message has been 

25 recognised and means are provided for enabling the sub-system to access the 
shared messages in the memory. 

Such a system may be used as a conditional access system enabling a 
subscriber to obtain access to a signal when transmitted in scrambled form 
together with the said management messages. In such an application, the said 

30 signal processing means would be operable to process the scrambled signal 
under the control of a descrambler to enable the original signal to be 
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recovered, and the sub-system would control the descrambler in response to 
the management messages. The management messages may comprise 
general and shared entitlement management messages and the sub-system 
may require an appropriate shared entitlement management message to enable 
descrambling of the signal. 

The sub-system may be operable to detect shared messages addressed 
thereto by reading a code carried by the general message, using that code to 
access one of a plurality of shared address (SA) values stored in a look-up 
table of the sub-system, and comparing the accessed SA value with respective 
shared address values carried by respective shared messages. Such a look-up 
table may be held in a removable data storage device (such as a smartcard) 
with the sub-system including connection means operable to receive the data 
storage device and access information held therein. 

Further features and advantages are recited in the claims hereinafter, 
and will be apparent from reading of the following in which preferred 
embodiments of the present invention are described in terms of an encrypted 
satellite broadcast reception system byway of example only and with reference 
to the accompanying drawings in which: 

Figure 1 schematically represents the components of a satellite 
broadcast reception system; 

Figure 2 is a flow chart representing conventional handling of global and 
shared entitlement management messages (EMMs); 

Figure 3 schematically illustrates a descrambler stage, as in Figure 1, 
embodying the invention; 

Figure 4 schematically illustrates a decryptor stage for use with the 
descrambler of Figure 3; and 

Figure 5 is a flow chart illustrating the handling of EMMs in the 
descrambler and decryptor stages of Figures 3 and 4. 

The following description is concerned principally with the operation of 
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over-the-air entitlement distribution processes, such as the handling of 
encrypted satellite broadcasts according to the well-known Eurocrypt encryption 
scheme. A suitable reception system for such schemes is illustrated in Figure 
1 and comprises a receiving dish 10 with associated satellite outdoor unit 
5 (SOU) 12, a receiver stage 14, a conditional access sub-system (CASS) 16, 
and a video monitor 18. 

The SOU 12 controls the dish in terms of, for example, satellite position, 
polarisation, band width selection of the down converter and so forth, in 
dependence on control signals received from a control stage 20 of the receiver 

10 14. The output from the SOU is an RF signal which is fed to a tuner stage 22 
of the receiver 14. The detailed construction of the SOU 12 will be familiar to 
those skilled in the art, plays no part in the operation of the present invention, 
and will not be further described. 

In response to user selection (via user I/O 24) of a particular encrypted 

15 satellite broadcast channel, the tuner 22 outputs the scrambled AV signal to a 
data processing/descrambler stage 26. Encrypted control words and 
entitlement management messages (EMMs) from the signal are passed to a 
decryptor stage 28 in the CASS 16. A so-called "secure" part of the decryptor 
comprises a user-inserted smart card 30 accessed under control of a local 

20 control unit 32 by a suitable card reader 34. By use of the smart card 30, the 
decryptor 28 is able to decrypt the control words (as will be described), which 
decrypted codes are passed back to the descrambler 26 in the receiver. These 
code words define how the scrambled AV signal is to be treated by the 
descrambler which then applies that treatment and outputs the descrambled 

25 signal to the video monitor 18 for display. 

The Eurocrypt system defines four types of EMMs, depending on 
whether the broadcast is for general reception or is to be limited to certain 
groups of subscribers. These are: 

1 . EMM-G (Global) Entitlement message for the whole audience 

30 2. EMM-U (Unique) Entitlement for a single user 

3. EMM-S (Shared) Entitlement for a small group of users 
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4. EMM-C (Collective) Entitlement for a large number of users 
All EMM packets have the same packet address; they differ only in terms 
of their packet type. However, EMM-U, EMM-C and EMM-S packets have an 
additional address field at the start of the packet, which is used to limit the 

5 applicability of the packet. For example, an EMM-U has a 36-bit Unique 
Address (UA) field which identifies the packet as belonging to one particular 
customer. The decryptor sends this UA information to the descrambler as part 
of an acquisition specification for the EMM-U packets. On receipt of this 
acquisition specification, the descrambler can then filter out all the EMM-U 

io packets which do not contain the same UA value. A similar technique is used 
for EMM-S packets, except that the SA (Shared Address) is only 24-bits wide, 
and for EMM-C packets which have a 12-bit Collective Address. 

The following description principally concerns the relationship between 
EMM-G and EMM-S messages, which are used in conjunction to enable shared 

15 entitlements to be distributed. For these, a single EMM-G packet acts as a 
header for a series of EMM-S packets (each EMM-S for a different group of 
customers). The SA given by the decryptor acquisition specification is 
determined by a Program Provider Identification (PPID) field given in the EMM- 
G. Typically, a smartcard can contain details for up to 50 Program Providers, 

20 so the decryptor of the CASS 16 must analyse the EMM-G before requesting 
the EMM-S: it must identify the PPID in the packet in order to look up the 
correct SA for the descrambler 26 to use. 

The conventional order of events in a descrambler and decryptor is as 
shown in the flowchart of Figure 2. EMM-G processing begins at step 101 with 

25 receipt of an EMM-G. At step 102, the descrambler sends the EMM-G to the 
decryptor, where it is then analysed (step 103) to find out which EMM-S needs 
to be acquired. Having determined the desired EMM-S, the decryptor sends 
the acquisition specification to the descrambler (step 104) on receipt of which 
the descrambler starts acquisition of the desired EMM-S packets, at step 105. 

30 At step 106, the descrambler receives a first EMM-S and, at step 107, it passes 
this to the decryptor. The application of the EMM-S by the decryptor will be 
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described hereinafter. 

Problems arise with the procedure of Figure 2 if the minimum 
transmission delay between the EMM-G packet and the first EMM-S packet 
following it becomes less than the time required (Delay G-S) to complete steps 
102 to 105 - typically about 1.5 seconds. In such a situation, there is the 
possibility that the decryptor 28 in the CASS will not acquire the first EMM-S 
because it does not have time to carry out all the actions needed. Accordingly, 
there is a requirement for a method of speeding up the request for acquisition 
of EMM-S messages after the reception of an EMM-G. 

Further problems arise due to the fact that, within the descrambler, 
different types of packets (control words, entitlement messages etc.) have 
different priorities which decide the order in which they should be sent to the 
decryptor. In a conventional implementation, there are two priority levels, with 
top priority being given to any control word packets that have been received 
and lower priority being given to all other packets (including EMM packets). 
This is intended to ensure that the control words are delivered to the decryptor 
as quickly as possible, but it does however mean that an EMM-G packet which 
arrives at about the same time as the control word packets will be delayed by 
them before being sent to the decryptor. Also, there is no priority set between 
different EMM packet types. 

In order to avoid the above-mentioned problems, in a system embodying 
the invention, as soon as the decryptor requests an EMM-G, the descrambler 
is set also to call for an EMM-S but without specifying any particular SA. As 
a result, it will receive all the EMM-S packets in the broadcast. However, it 
does not send them to the decryptor, but stores them in the hardware buffers 
of the acquisition system. Some little time later (having analysed the EMM-G), 
the decryptor will call for an EMM-S with a particular SA value. The 
descrambler then starts to sequentially read each successive EMM-S out of the 
buffer. It filters them based on the SA and passes those which match to the 
decryptor: the rest are thrown away. 

Figures 3 and 4 respectively show the descrambler and decryptor of 
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Figure 1 in greater detail. Considering first the descrambler 26, the incoming 
AV signal 40 includes a number of independent service components: in the 
example shown, the AV signal consists of a video signal V, two audio signals 
A 15 A 2 - for example a soundtrack in two different languages, and two data 
signals such as teletext. Under the direction of a control and filtering 

stage 38, a demultiplexer 42 receiving the incoming AV signal assigns the 
various components of the signal to respective ones of eight acquisition 
channels, each with buffering for eight packets of data. Also under the 
direction of control stage 38, the video, audio and data signal components V, 
A 15 A 2 , D 1? D 2 are read out of respective buffers 44 to respective descrambling 
stages 52, 54, 56, 58, 60. 

The encrypted code words (ECW) and entitlement management 
messages (EMM-G and EMM-S) from the incoming signal are assigned to 
further ones of the acquisition channels by the demultiplexer 42 and, after 
buffering in respective random access memories (RAMs 46,48,50), are passed 
via control logic/filter stage 38 to the decryptor 28, shown in Figure 4. Note 
that the card reader 34 and CASS local control 32 have been omitted from the 
figure for reasons of clarity. 

In the decryptor, the encrypted code words ECW may be buffered 62 in 
successive buffers and sequentially read out by multiplexer 64 for decrypting. 
The EMM packets are read into a register 66: if the packet is an EMM-G, the 
PPID is read out to provide an address to the Provider memory 68 of the 
smartcard. The Provider memory 68 in turn outputs a shared address 
acquisition specification (SAq) to the decoder. If the packet is an EMM-S 
supplied in response to the SAq, this is supplied from the register 66 to a 
decryption stage 70 which also receives the encrypted code words ECW from 
the multiplexer 64, sequentially decrypts them on the basis of the EMM-S, and 
outputs the stream of decrypted code words DCW to the descrambler. 

Returning to Figure 3, different decrypted control words may be required 
for different ones of the AV signal components. In the example shown, three 
control words CW.1-3 (separated from the DCW stream by demultiplexer 72) 
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are shown, with CW.1 required for descrambling of both the video V and first 
audio A 1 components, CW.2 required for both the second audio A 2 and second 
data D 2 components, and CW.3 required for the first data component D v Once 
the AV signal components have been separately descrambled they may be 
combined at 76 (as for V, A v A 2 , and or output individually, as for D 2 . 

The order of events in the descrambler and decryptor of Figures 3 and 
4 is illustrated by the flowchart of Figure 5. As before, the process begins (at 
step 201 ) with the receipt of an EMM-G. At step 202, the descrambler requests 
all EMM-S packets (regardless of SA) and, under direction of the control stage 
38, the EMM-S packets for each of the signal components are stored in the 
RAM buffer 50 of the assigned acquisition channel (step 203). 

Following the request of step 202, whilst buffering is taking place, the 
descrambler sends the EMM-G to the decryptor register 66 via the RAM 48 in 
its acquisition channel and the control stage 38 (step 204). At step 205, the 
decryptor analyses the EMM-G (to find out which EMM-S packets to acquire) 
by reading the PPID field and using this to address Provider memory 68. At 
step 206, the decryptor sends the acquisition request SAq (output from memory 
68) to the descrambler. 

Based on the acquisition request, at step 207 the control stage 60 of the 
descrambler reads the EMM-S values directly from the RAM buffer 50 and 
filters them by discarding all those whose SA does not correspond to that 
specified in the SAq. Finally, at step 208, the matched EMM-S packets are 
sent to the decryptor. 

As will be seen from the foregoing, the problem of loss of early EMM-S 
packets is avoided as all are buffered once a global EMM-G has been received: 
the delay (G-S) between receipt of the EMM-G and following EMM-S packets 
is reduced as may be seen by comparing Figures 2 and 5. The system also 
avoids the problems due to the EMM-G having a lower priority than, for 
example, code words since the descrambler will start to store the EMM-S 
packets as soon as the EMM-G is detected, even if priority levels delay the 
sending of the EMM-G to the decryptor. 
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From reading the present disclosure, other modifications will be apparent 
to persons skilled in the art. Such modifications may involve other features 
which are already known in the design, manufacture and use of data packet 
receiving and conditional access systems and equipment and component parts 

5 thereof and which may be used instead of or in addition to features already 
described herein. Although claims have been formulated in this application to 
particular combinations of features, it should be understood that the scope of 
the disclosure of the present invention also includes any novel feature or any 
novel combination of features disclosed herein either explicitly or implicitly or 

10 any generalisation thereof, whether or not it relates to the same invention as 
presently claimed in any claim and whether or not it mitigates any or all of the 
same technical problems as does the present invention. The applicants 
hereby give notice that new claims may be formulated to such features and/or 
combinations of features during the prosecution of the present application or 

15 of any further application derived therefrom. 
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CLAIMS 

1 . A receiver system for receiving a signal transmitted together with 
management messages, the system comprising means for receiving the 
5 transmitted signal, signal processing means for processing the received signal, 
and a sub-system for controlling the signal processing means and acting in 
response to the management messages, wherein the management messages 
include general messages and shared messages, a general message 
preceding and indicating that a plurality of shared messages are to be 

10 transmitted, and said sub-system requiring an appropriate shared message to 
enable processing of the signal and being arranged to monitor shared 
messages to detect a shared message which is addressed thereto, 
characterised in that the system includes means for recognising a general 
message, memory means are provided for storing a plurality of shared 

15 messages, means are provided for causing shared messages to be stored in 
said memory when a general message has been recognised and means are 
provided for enabling the sub-system to access the shared messages in the 
memory. 

20 2. A system as claimed in Claim 1, for use as a conditional access 

system enabling a subscriber to obtain access to said signal when transmitted 
in scrambled form together with said management messages, said signal 
processing means being operable to process the scrambled signal under the 
control of a descrambler to enable the original signal to be recovered, and said 

25 sub-system controlling the descrambler in response to the management 
messages, wherein the management messages comprise general and shared 
entitlement management messages and said sub-system requires an 
appropriate shared entitlement management message to enable descrambling 
of the signal. 

30 

3. A system as claimed in Claim 1, wherein the sub-system is 
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operable to detect shared messages addressed thereto by reading a code 
carried by the general message, using that code to access one of a plurality of 
shared address (SA) values stored in a look-up table of the sub-system, and 
comparing the accessed SA value with respective shared address values 
5 carried by respective shared messages. 

4. A system as claimed in Claim 3, wherein the look-up table is held 
in a removable data storage device and the sub-system includes connection 
means operable to receive the data storage device and access information held 

io therein. 

5. A system as claimed in Claim 4, wherein the removable data 
storage device comprises a smartcard. 

15 6. A system as claimed in Claim 3, wherein the sub-system is 

arranged to access the shared messages in the memory by reading out 
successively stored ones of the messages and discarding those with a shared 
address value other than the accessed SA value. 



20 
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